Moved Debian package sources to a subdirectory of the repository.

2026-05-28 09:18:43 +02:00
parent ac6482a4a1
commit 1f6d168fb3
22 changed files with 3 additions and 0 deletions
@@ -0,0 +1,7 @@
+network:
+  version: 2
+  ethernets:
+    eth1:
+      routes:
+        - to: {{ local_subnet }}
+          via: {{ router_int_gateway_ip }}
@@ -0,0 +1,14 @@
+LOCAL_ADDRS="{{ local_addrs }}"
+LOCAL_FQDN="{{ local_fqdn }}"
+LOCAL_ID_MODE="{{ local_id_mode }}"
+LOCAL_CIDRS="{{ local_cidrs }}"
+LOCAL_SUBNET="{{ local_subnet }}"
+REMOTE_ADDRS="{{ remote_addrs }}"
+REMOTE_ID="{{ remote_id }}"
+REMOTE_CIDRS="{{ remote_cidrs }}"
+ROUTER_INT_GATEWAY_IP="{{ router_int_gateway_ip }}"
+P2S_ADDRESS_POOL="{{ p2s_address_pool }}"
+P2S_SERVER_NAME="{{ p2s_server_name }}"
+WG_ENABLED="{{ wg_enabled }}"
+WG_ADDRESS="{{ wg_address }}"
+WG_LISTEN_PORT="{{ wg_listen_port }}"
@@ -0,0 +1,2 @@
+[Resolve]
+DNSStubListenerExtra={{ local_addrs }}
@@ -0,0 +1,46 @@
+connections {
+  remote-site {
+    version = 2
+    proposals = aes256-sha256-modp2048,aes256-sha1-modp1024
+    reauth_time = 28800
+    unique = replace
+
+    local_addrs  = {{ local_addrs }}
+    remote_addrs = {{ remote_addrs }}
+
+    local {
+      id = {{ local_id }}
+      auth = psk
+    }
+
+    remote {
+      id = @{{ remote_id }}
+      auth = psk
+    }
+
+    children {
+      site2site {
+        mode = tunnel
+        local_ts = {{ local_cidrs }}
+        remote_ts = {{ remote_cidrs }}
+        esp_proposals = aes256-sha256,aes256-sha1
+        life_time = 3600
+        dpd_action = restart
+        start_action = start
+        close_action = none
+      }
+    }
+
+    rekey_time = 10800
+    dpd_delay = 10
+    dpd_timeout = 120
+  }
+}
+
+secrets {
+  ike-psk {
+    id-1 = {{ local_id }}
+    id-2 = @{{ remote_id }}
+    secret = "{{ psk }}"
+  }
+}
@@ -0,0 +1,43 @@
+connections {
+  road-warrior {
+    version = 2
+    proposals = aes256-sha256-modp2048,aes256-sha1-modp1024
+    reauth_time = 28800
+    dpd_delay = 10
+    dpd_timeout = 120
+
+    local {
+      auth = pubkey
+      certs = server.pem
+      id = @{{ local_fqdn }}
+    }
+
+    remote {
+      auth = eap-tls
+      cacerts = ca.pem
+      eap_id = %any
+    }
+
+    children {
+      road-warrior {
+        mode = tunnel
+        local_ts = {{ local_cidrs }}
+        remote_ts = dynamic
+        esp_proposals = aes256-sha256,aes256-sha1
+        life_time = 3600
+        dpd_action = clear
+        start_action = none
+        close_action = none
+      }
+    }
+
+    pools = rw-pool
+  }
+}
+
+pools {
+  rw-pool {
+    addrs = {{ p2s_address_pool }}
+    dns   = {{ local_addrs }}
+  }
+}
@@ -0,0 +1,4 @@
+[Interface]
+PostUp = wg set %i private-key /etc/wireguard/wg0.key
+ListenPort = {{ wg_listen_port }}
+Address = {{ wg_address }}